The STP protocol, as enabled in Linux 2.4.x, does not provide sufficient security by design, which allows attackers to modify the bridge topology.
- http://www.redhat.com/support/errata/RHSA-2003-239.html
No PoCs found on GitHub currently.